CISSP-ISSAP · Question #94
Which of the following are the goals of a public key infrastructure (PKI)? Each correct answer represents a part of the solution. Choose all that apply.
The correct answer is A. Authenticity D. Integrity E. Confidentiality F. Nonrepudiation. PKI is a framework built around four core security objectives. Authenticity (A) is achieved through digital certificates that verify the identity of users, devices, and servers. Integrity (D) is ensured via digital signatures, which detect any tampering with data in transit…
Question
Which of the following are the goals of a public key infrastructure (PKI)? Each correct answer represents a part of the solution. Choose all that apply.
Options
- AAuthenticity
- BGlobalization
- CMobility
- DIntegrity
- EConfidentiality
- FNonrepudiation
How the community answered
(56 responses)- A93% (52)
- B5% (3)
- C2% (1)
Explanation
PKI is a framework built around four core security objectives. Authenticity (A) is achieved through digital certificates that verify the identity of users, devices, and servers. Integrity (D) is ensured via digital signatures, which detect any tampering with data in transit. Confidentiality (E) is provided through asymmetric encryption, keeping data private from unauthorized parties. Nonrepudiation (F) means that because private keys are unique to each entity, a sender cannot deny having signed or sent a message.
Globalization (B) and Mobility (C) are not security properties - they describe reach and accessibility, which are business/operational concerns that PKI may support indirectly but does not define as goals.
Memory tip: Use the acronym ACIN - Authenticity, Confidentiality, Integrity, Nonrepudiation - or think of the classic CIA triad (Confidentiality, Integrity, Authenticity) plus Nonrepudiation. If a term sounds like a marketing buzzword (globalization, mobility) rather than a security property, it's a distractor.
Topics
Community Discussion
No community discussion yet for this question.